Wednesday, 2023-03-15

noonedeadpunkmornings10:24
noonedeadpunkI'm still trying to deploy damn compute node lol :D10:26
jrossermorning!10:27
jrosseri'm still fiddling with the log collection stuff which i thought would be pretty quick /o\10:27
opendevreviewJonathan Rosser proposed openstack/openstack-ansible master: Refactor log collection from lxc containers  https://review.opendev.org/c/openstack/openstack-ansible/+/87738210:42
noonedeadpunkThiagoCMC: hey! regarding rally, can you try running `os-rally-install.yml -e venv_wheel_build_enable=true`?10:57
noonedeadpunkAlso, the host where you're trying to install rally is running ubuntu 20.04, right?10:57
opendevreviewMerged openstack/openstack-ansible-os_ironic stable/zed: Update ironic documentation  https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/87739311:02
opendevreviewJonathan Rosser proposed openstack/openstack-ansible master: Remove nova-scheduler from ironic compute container_skel  https://review.opendev.org/c/openstack/openstack-ansible/+/87746712:00
hamidlotfiHi there,12:32
hamidlotfiI wanted to scale my OSA environment with your guide published at `https://docs.openstack.org/openstack-ansible/latest/admin/scale-environment.html`  12:32
hamidlotfiBut the new node and all containers contained in it do not add to /etc/hosts file of other nodes.12:32
hamidlotfifor example, I added a node called infra04.but infra04 does not pinging with itself name from infra01 or infra02 or infra03 .12:35
noonedeadpunkhamidlotfi: Well, if you was limiting all deployment to infra04 then there's no way how ansible playbook could run against infra01-0312:44
noonedeadpunkSo I'd run `openstack-ansible playbooks/openstack-hosts-setup.yml -e openstack_host_group=all --tags openstack_hosts-config12:47
hamidlotfinoonedeadpunk:  because in that document exactly writed `To prepare new hosts and deploy containers on them run setup-hosts.yml playbook with the limit argument` 12:47
noonedeadpunkYeah, we might miss that step in the document12:48
hamidlotfiplease explain it here.12:48
noonedeadpunkEentually I think we miss it for compute deployment as well....12:49
noonedeadpunkWell, as I said, in order to update hosts file on infra01, you need to run an openstack_hosts role against this host12:50
noonedeadpunkAnd if you're limiting to infra04 only - play won't touch anything except infra0412:50
noonedeadpunkCan you report a bug regarding this documentation issue so we won't forget to fix it?12:51
opendevreviewMerged openstack/openstack-ansible-haproxy_server stable/xena: Use let's encrypt standalone flag only for http-01  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/87462113:18
noonedeadpunkor propose fix to it :-)13:25
opendevreviewJonathan Rosser proposed openstack/openstack-ansible-os_ironic master: Install socat and configure ipmtool-socat console interface  https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/87747913:52
damiandabrowskijrosser: regarding https://review.opendev.org/c/openstack/openstack-ansible/+/87663914:08
damiandabrowskiI'm not sure how much we should focus on saving CI resources, but do you think it would be worth to just add "stepca" scenario to two already existing jobs(one lxc and one metal) instead of defining two completely new jobs?14:08
dokeeffe85Hi all, it's been a while :) quick question for anyone that may have an answer. I could create a flat network that had access to the internet fine and as many private networks as I wanted in my last test deploy and it all worked fine. Now my question is, using ovs can I create multiple "external" networks or would I handle that by using routers? The simplest way possible would suit, if it can be done that is!! Thanks in advance as always14:15
noonedeadpunkdamiandabrowski: I think we also want to test our pki scenario as well. So adding stepci to existing jobs will prevent us from checking another path14:22
jrosseri wonder what the impact on CI resources is now its !tripleo14:22
damiandabrowskidokeeffe85: regardless of ml2 driver, you can create only one flat provider network for each physical network14:23
noonedeadpunkdokeeffe85: sorry, I'm not sure I got question... So you have multiple public interfaces/networks you want to add?14:23
noonedeadpunkyeah, but you can also create plenty of vlans external networks on the same flat if needed...14:24
damiandabrowskiif you want to change that, I'd suggest leveraging vlans/vxlans/geneve etc.14:24
noonedeadpunkBut I'm not sure I got what you really want to achieve to be frank14:25
noonedeadpunkAs you can also add multiple subnets to the one external network14:25
dokeeffe85Ok sorry, yeah what I wanted to do was create lets say 87.44.17, .18, .19, .20 all /24 and have 4 different networks with internet access. This is possible using vlan networks on one flat network?? Does it need to be set up on the original run of the playbooks or can I do it through openstack later?#14:41
noonedeadpunkyou can do that anytime I would say. If you haven't configured vlan networks - you can do that afterwards but will need to re-run neutron playbook14:43
noonedeadpunkIf vlan networks were configured already - the only thing you would need to do is to create networks with horizon/cli/api with correct type and vlan ids14:43
opendevreviewTakashi Kajinami proposed openstack/ansible-config_template master: Remove TripleO jobs  https://review.opendev.org/c/openstack/ansible-config_template/+/87748614:44
noonedeadpunk`vlan networks were configured already` -> I mean mappings for ml2 plugin14:44
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible stable/xena: Bump OpenStack-Ansible Xena  https://review.opendev.org/c/openstack/openstack-ansible/+/87748814:47
opendevreviewTakashi Kajinami proposed openstack/ansible-role-python_venv_build master: Remove TripleO jobs  https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/87751014:49
opendevreviewTakashi Kajinami proposed openstack/ansible-role-python_venv_build stable/ussuri: Ussuri-only: Remove TripleO job  https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/87751114:54
opendevreviewTakashi Kajinami proposed openstack/ansible-role-python_venv_build stable/victoria: Victoria-only: Remove TripleO job  https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/87751214:55
admin1dokeeffe85, using vlan is the best, as you can then control/route the vlans 15:46
admin1and you can create as many networks as you want which are external 15:46
noonedeadpunkActually, no more then 4096 :D15:47
noonedeadpunkbut yeah, quite a lot :D15:48
admin1imaging 4000+ ext- networks :) 15:48
admin1imagine*15:48
jrosserjust FYI i proved right now that `openstack_opendev_base_url: https://github.com` works a treat if your connectivity to opendev.org goes bad15:50
dokeeffe85Thank you noonedead punk. Would I also need to do bonds in the netplan for each of those vlan networks, you wouldn't have a link to an example or similar would you please?16:00
jrosserdokeeffe85: the advantage of doing it with vlan networks is that you don't need to specify the actual vlan anywhere in the host networking config, it's a "trunk" port from your switch16:02
jrosserso to bring up a new vlan type external network you would permit that particular vlan tag on the switch ports16:02
jrosserthen you'd create the vlan type provider network with segmentation_id being the vlan tag, and off you go16:03
jrosser^ create the neuton network with the openstack cli 16:04
noonedeadpunkadmin1: well, they could be /28  or smth lol16:17
ThiagoCMCnoonedeadpunk, yes, it's Ubuntu 20.04, I'll try your suggestion now.16:35
ThiagoCMCnoonedeadpunk, worked!16:42
noonedeadpunkwell, you can place that safely in user_variables if you want to)16:47
ThiagoCMCAhh... Cool, thanks!16:51
opendevreviewJonathan Rosser proposed openstack/openstack-ansible-os_swift master: DNM - test commit  https://review.opendev.org/c/openstack/openstack-ansible-os_swift/+/87753017:02
opendevreviewJonathan Rosser proposed openstack/openstack-ansible-os_ironic master: DNM - test  https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/87753117:02
opendevreviewJonathan Rosser proposed openstack/openstack-ansible-os_swift master: Fix role as a result of ANSIBLE_INJECT_FACT_VARS=false  https://review.opendev.org/c/openstack/openstack-ansible-os_swift/+/87753417:26
jrossernoonedeadpunk: we broke some stuff ^^17:26
jrosserthere will be more too17:26
jrosserlike here https://github.com/openstack/openstack-ansible/blob/master/playbooks/common-tasks/dynamic-address-fact.yml#L1917:27
* noonedeadpunk not surprised17:27
jrosserthat makes it interesting to think we can just make ANSIBLE_INJECT_FACT_VARS=true again17:27
jrossermight have to craft the code specially to deal with both cases17:27
noonedeadpunkWait, should not hostvars[inventory_hostname] work anyway?17:27
noonedeadpunkah, it's fact17:28
noonedeadpunkok, yes, sorry, disregard17:28
jrosseridk what that code is about from before, but very old17:28
noonedeadpunkdamn, now we should think twice what is fact and what is var...17:29
noonedeadpunkas hostvars is no longer universal thing...17:30
jrosseragain here :( https://github.com/openstack/openstack-ansible/blob/master/playbooks/common-tasks/dynamic-address-fact.yml#L3017:31
jrosseroh no thats ok i think17:31
opendevreviewJonathan Rosser proposed openstack/openstack-ansible-os_ironic master: Update IPA version for 2023.1 release of Ironic  https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/87753817:44
ThiagoCMCIt feels a bit weird that OSA uses CentOS 9 for `ironic_deploy_image_base_name` even in a 100% Ubuntu-based environment...  :-P17:54
jrosserthats really down to the choice of the ironic team, they build it17:54
ThiagoCMCI understand it uses what's availalbe on opendev.org but, doesn't it bring side effects? I mean, a discovered machine with CentOS 9 can have different network interfaces name of a deployed Ubuntu, right?17:55
ThiagoCMCjrosser, sure... Just curious  ^_^17:55
jrosserwell, IPA is a disk image you boot baremetal nodes with that then dd the actual OS you want onto the disk, and reboot17:55
ThiagoCMCI see... Sounds similar with MaaS17:55
jrosserits the provisioning agent for ironic17:56
ThiagoCMCGot it. I'm still very new with Ironic, didn't managed to make it work yet. lol17:56
jrosseri did a huge patch on the documentation recently which might help17:56
ThiagoCMCNice!17:57
ThiagoCMCI'll give it a try again this month. Got new machines and I'm going for Ubuntu 22.04 and maybe Oracle Linux 9 too.17:57
ThiagoCMCShould I go with `stable/zed`, or maybe better stick with `master` (for playing with OSA + Ironic)?17:58
opendevreviewMerged openstack/ansible-role-pki master: Allow to provide custom handler names  https://review.opendev.org/c/openstack/ansible-role-pki/+/87575718:06
opendevreviewMerged openstack/openstack-ansible-haproxy_server master: Allow default_backend to be specified  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/87615718:07
jrosserNeilHanlon: you wouldn't happen to know if there is an equivalent of this on RH-alikes? https://packages.ubuntu.com/kinetic/qemu-system18:18
jrosserqemu-system is a metapackage which pulls in * architecture qemu-system-*18:18
jrosserso if i want just x86 i can install qemu-system-x8618:19
NeilHanlonI know it's in Fedora as of recent branches, but I don't think it made it into RHEL 918:21
NeilHanlonwhat the heck, i'll try to rebuild it lol18:21
jrosserhah well what i'm looking to do is be specific about the architectures that do get installed18:21
jrosserbecause the presence of qemu-system-<random-architecture> binary on a system of a different architecture has some really undesirable side effects18:22
jrosser^ unless of course you are happy with totally random emulation of your VM on non-native architectures :)18:22
NeilHanlonah, i see. i thought you were looking for like the qemu-static usermode emulation stuff18:23
ThiagoCMCLike with QEMU x86_64 VM on arm64 host?  =P18:23
NeilHanlonin that case I think you can install `qemu-system-$arch-core`18:23
jrosserso i'd ideally like to be installing the arch-specific package based on the ansible_facts['architecture'], rather than just get everything18:23
jrosserahha that'd do it - was just failing to find how they were named18:24
NeilHanlonThiagoCMC: or worse, QEMU ppc64le on a ppc64le host 🙃18:24
jrosserThiagoCMC: that is *exactly* the sitaution i have here right now18:24
jrosserand it's been a total pain to make that not happen18:24
NeilHanlonyucky :( 18:24
ThiagoCMCCool! I think... lol18:25
jrosserif you have an existing cloud, like an x86 one18:25
jrosserand you have never had to put hw_architecture property on your images18:25
jrosserthen as soon as you add an arm node all manner of wierd breaks out of qemu-system-x86 is installed on the arm node18:25
ThiagoCMCI always do that.18:25
NeilHanlonI'm checking to make sure the EL9 rpm is built in a way that does this.. it may have been a recent fedora change18:26
ThiagoCMCI mean, for example, setting properties 'cpu_arch: x86_64'18:27
jrosseri am not sure it is that simple18:27
jrosserreally cpu_arch and not hw_architecture?18:29
ThiagoCMChttps://docs.ansible.com/ansible/2.6/modules/os_image_module.html - It's `cpu_arch`18:30
ThiagoCMCAt least with that Ansible module =P18:31
jrosserwell tbh this sums it up unfortunatley https://www.mail-archive.com/openstack-dev@lists.openstack.org/msg109964.html18:34
NeilHanlonookay.. on Rocky/RHEL 9, it looks like we only provide qemu-kvm from the base repositories. Where are we installing the qemu-system executables from? CentOS Virt sig?18:37
jrossernot sure tbh - i need to look18:38
jrosserour CI jobs make a log of whats installed and from where so that should be pretty straightforward to see18:38
jrosserNeilHanlon: https://zuul.opendev.org/t/openstack/build/e1ff3ed32af3419bbd019cf6d4125599/log/logs/redhat-rpm-list-installed-host-19-29-09.txt18:40
jrosserso in this case i think whatever we're doing we only get the x86 one https://zuul.opendev.org/t/openstack/build/e1ff3ed32af3419bbd019cf6d4125599/log/logs/redhat-rpm-list-installed-host-19-29-09.txt#546-56218:41
NeilHanlonit appears that in theory, DNF should just install the right one based on the host architecture, and this issue shouldn't "exist" per se18:44
* NeilHanlon should just rebuild latest qemu in COPR...18:45
NeilHanlonbtw jrosser: I assume that cloud-init thing has been working OK? I asked to upstream it into CentOS Stream, but am expecting it will take until after they release 9.2 and 8.8 in May before it gets merged in.. for now i'll keep the copr repo active18:51
jrosserNeilHanlon: yes it has been working ok19:05
jrosserNeilHanlon: you could check over this too (and the comments) to see if thats what you expect from DIB/Rocky19:07
jrosserhttps://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/86754719:07
jrosserwas quite an adventure to come up with a recipe that works for both x86 and aarch6419:08
jrosserthe whole DIB_CLOUD_INIT_DATASOURCES=Ec2 was unobvious, to say the least19:09
NeilHanlondefinitely will take a look19:15
opendevreviewMerged openstack/ansible-role-python_venv_build master: Remove TripleO jobs  https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/87751021:40
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible master: Split haproxy horizon config into 'base' frontend and 'horizon' backend  https://review.opendev.org/c/openstack/openstack-ansible/+/87616022:26
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible master: Deploy step-ca when 'stepca' is part of the deployment scenario.  https://review.opendev.org/c/openstack/openstack-ansible/+/87663722:26
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible master: Add a /etc/hosts entry for the external IP of an AIO  https://review.opendev.org/c/openstack/openstack-ansible/+/87663822:26
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible master: Use certbot to generate SSL cert for the external VIP in 'stepca' scenario  https://review.opendev.org/c/openstack/openstack-ansible/+/87663922:26
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible master: Use a map file to select haproxy horizon backend from the base frontend  https://review.opendev.org/c/openstack/openstack-ansible/+/87685122:26
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible master: Enable TLS frontend for repo_server by default  https://review.opendev.org/c/openstack/openstack-ansible/+/87642622:26
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible master: Define some temporary vars for haproxy  https://review.opendev.org/c/openstack/openstack-ansible/+/87232822:26
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible master: Prepare main repo for separated haproxy config  https://review.opendev.org/c/openstack/openstack-ansible/+/87118922:26
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible master: Prepare main repo for separated haproxy config  https://review.opendev.org/c/openstack/openstack-ansible/+/87118922:36
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible-haproxy_server master: Simplify haproxy_service_configs structure  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/87118822:47
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible-haproxy_server master: Prepare haproxy role for separated haproxy config  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/87577922:47

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!